Open-mmlab vulnerabilities
We track 1 vulnerability in Open-mmlab products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on March 20, 2025.
1vulnerabilities
1critical
0high
0exploited
9.8average CVSS score
Latest Open-mmlab vulnerabilities
- 9.8 Critical severity
open-mmlab/mmdetection: Deserialization of Untrusted Data
A remote code execution vulnerability exists in open-mmlab/mmdetection version v3.3.0. The vulnerability is due to the use of the `pickle.loads()` function in the `all_reduce_dict()` distributed training API without proper sanitization. This allows an attacker